Analysis
- max time kernel
147s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
25/09/2024, 21:27
Static task
static1
Behavioral task
behavioral1
Sample
f6e404738f97d38f04c5674bc15864ec_JaffaCakes118.html
Resource
win7-20240708-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
f6e404738f97d38f04c5674bc15864ec_JaffaCakes118.html
Resource
win10v2004-20240802-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target f6e404738f97d38f04c5674bc15864ec_JaffaCakes118.html
- Size 193KB
- Sample240925-1ay7hs1hpd
- SHA256 0f5cb5eb73be2316f7433025edcf624be5471af216a53102586c29d962f5dfe6
- MD5 f6e404738f97d38f04c5674bc15864ec
- SHA1 d1efa96bbc30907e056f367fd19d5fa8a1ab2344
- SHA512 6c227434a86920de4a7fed94b3e05f4dd5a7f309bc8a50c66d822718c6d1943655a75fbeecc4497475cb2e90f6e89018132935b2e7d841bc84682ca5ed58a4d5
- SSDEEP 3072:CWxDNvG8rm/GXmNJUNBVTRQUe+E4CVgnLIgWWyHb/th2wxngwD8URoJm:FVXmNJgC1yE
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 4904 msedge.exe 4904 msedge.exe 2012 msedge.exe 2012 msedge.exe 2704 msedge.exe 2704 msedge.exe 2704 msedge.exe 2704 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
pid Process 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe 2012 msedge.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2012 wrote to memory of 4068 2012 msedge.exe 82 PID 2012 wrote to memory of 4068 2012 msedge.exe 82 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 800 2012 msedge.exe 83 PID 2012 wrote to memory of 4904 2012 msedge.exe 84 PID 2012 wrote to memory of 4904 2012 msedge.exe 84 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85 PID 2012 wrote to memory of 4836 2012 msedge.exe 85
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f6e404738f97d38f04c5674bc15864ec_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2012 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb70f746f8,0x7ffb70f74708,0x7ffb70f747182⤵PID:4068
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:22⤵PID:800
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:4904
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:82⤵PID:4836
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:12⤵PID:1584
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:12⤵PID:2660
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:12⤵PID:3484
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:12⤵PID:3260
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:12⤵PID:1524
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:12⤵PID:4140
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:12⤵PID:4728
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,7548750130859045101,10307110569125236259,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2704
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3152
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3620
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e
- MD5 d7114a6cd851f9bf56cf771c37d664a2
- SHA1 769c5d04fd83e583f15ab1ef659de8f883ecab8a
- SHA512 33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808
- MD5 719923124ee00fb57378e0ebcbe894f7
- SHA1 cc356a7d27b8b27dc33f21bd4990f286ee13a9f9
- SHA512 a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
- Size 23KB
- SHA256 7fd05e325904c9c31e435d5c65b9b4ffa11a9116d1df0282d6cd7c87ef6f1dbc
- MD5 c897f8479da25ec570027594f1b4db24
- SHA1 81a3ff06cf35a87e697fc4733966dffc270ad06b
- SHA512 b1c1c46810c3bc5c407f7d30a9d74db8242860965d958ffc5bfeed35b1204774843775ae81b8c414ea89322d00d7ab97313965e20cebba588edf13b9b8dcbc10
- SSDEEP 384:tU+gw6ZANCOehcIFLQp1N7sYfDUPbBGbouF/Ufk+/mc6522rk1l+vTZp4UMIoXAE:tUW6qNBeaIRQjfDDbouF/Uf+c6kh1l+6
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
- Size 45KB
- SHA256 c63fbcc69de230e4844cf735ccf668eeaf30e42126eeb464da39c2de6b0b0051
- MD5 ede70f717200a59b4cb831635de913a1
- SHA1 d4d6e893ac192b5df087e924ab3356852f8a7bc0
- SHA512 b621bde28b90ba97c122677989d994cb5e88fd0906366af1a23ad3f9d9f3b7f2bbef95873f29100433d4068fbbf7ab798505e68deefc118097fc5f76dfc4b672
- SSDEEP 768:aOX/jdsn7ZRu0lXLWWpFfQVGUF/swJ6olJezvFZ7jQVgoGuGQEPaa1A6X48r:9X/q7uQFcGes06OJQ8Vg5QEa+zXHr
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 456B
- SHA256 85a4cfdb66232ede9ca8b3e956202b25cc7a5d5fbc87ac4bc9b1069e65247057
- MD5 c1410d7a786425075821a667289b6ef8
- SHA1 3ad657fabe85293179a83a953348fc2578d42442
- SHA512 6b10bfe0fcf9ed13741d1787c29f07dafba5621325ec3558e93017f37c756222cf134c2d1241b181474a593cd47b6b12371b1a50025a20295e0d09b5ba611ab0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 432B
- SHA256 d9be24024e39f4137ff04ff4839827f6b7a61f558605a38181e2625cf07ba08a
- MD5 8e75d23d3eac196f1c71bf380731b71c
- SHA1 a899583381f72af8afddd7c8affde2a401bd3546
- SHA512 b5734eef04c1f0a8fa529e7db035fe4e50a3207ff6b5098340a4b60dff7c02fbc22374aa826da1c0ada5f83e4e6a3e13a77d756de1abc7fe04900ceda6e485b6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
- Size 4KB
- SHA256 99afbb02a4ba8361bd912f84dc7093b1a93156e8c5be382d9adf81b7373222de
- MD5 8e601b7576d73c09eb1e52045c5cff4f
- SHA1 82873cb1c85a285e770f9fb4d3af3c6e3d72d3d1
- SHA512 a6214c16f74f1ea68d48c32c6b48836dbb36460e7ec584ff5335699f6d5484d6c5618dbde010e6e1b57ea375e3271af1b503451de4d76da3363691cbb85db2e3
- SSDEEP 96:BrPoSA6r9nboQnXyhKl6u1EFUpZ/GwYGOGnGxS:BrPoSA6r9nboQnXyhe6uKFUpZ/OL+5
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 5KB
- SHA256 4b9a946da7e573408f413131043aeadd0250a97b94886ced779d2d68677217fc
- MD5 f28ece1162771e6360a7aa94f2ab6497
- SHA1 38081b1e8f17ae1edb4d5ccc8a5ae165480268f9
- SHA512 86e74caa3ca9691a10199ebff9a893503fb7278e273c634a7e9ce02fddf28b6cd6a01103fafaab2102c86bc93d4255993c9059f77556319c5085a7d78e687296
- SSDEEP 96:nok/hH1w8LSFhPwpvWMoiVmdeH/bjUWQyV+VDCziEwb:nok/V2VFhPGWMXPro
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 8KB
- SHA256 e4f41da58b6be8cf38bc5d519456860a8a3fc2cb26dabf06339689aec9802df1
- MD5 6b03c3217a401fef85351e3b329baa01
- SHA1 8315b1efe33a3ba6444c2895e732821d30a2c9bb
- SHA512 d3a273eba2fa370fa602d31657e4709ad0d876696ca7ba7f4523ca09b4cf31f50f98b32fe9bdfed79f0079d79a936e6c368863f0043c81dd4bf37b0d36dc0f31
- SSDEEP 192:nok/t2nFhPGWMMYA0wgfUJyY3M93I10EsZlAD2PrV:noQ2FhOW70Z5Ak
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 10KB
- SHA256 6ee58f208f92f7c9b6b8c58640df117c3db3205a773155f9fb85db67f7eab7a9
- MD5 d986ab9221e4c372270016aa491bc4d6
- SHA1 5078f3bb297b0ba623638884cf6f3e905392808b
- SHA512 2a07ea2bb932a91f65241e13520dea1a8ee4b6b9a032b88ab1232b6eac3a3113a16650ccb8ab98b467bb579171ca866b2bbae87b1b819fb7e2eb05b63d4ab07e
- SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupjqe2RU9xNeIcM/bo5Zx1:A9iIxuERzA83h09RZxYjkG3qZx1
- MD5 SHA1 SHA512 SSDEEP